You can do accounting for users who have to authenticate before they can pass through the PIX. It doesn't really do IP accounting as in keeping track of the number of packets, etc, other than in like a "sho perfmon" or "sho traffic" command output.
For user accounting, see here:
http://www.cisco.com/warp/public/110/atp52.html
